CVE-2008-5161: Infoleak

Published Nov 19, 2008
·
Updated

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.

Affected Software

167 affected components
SSH Tectia Server=5.0.3
SSH Tectia Connector=4.4.2
SSH Tectia Client=5.0.3f
SSH Tectia Server=4.4.6
SSH Tectia Client=5.0.2
SSH Tectia Server=5.2.0
SSH Tectia Connector=4.3.0
SSH Tectia Server=4.3
SSH Tectia Client=5.2.3
SSH Tectia Server=5.3.0
SSH Tectia Client=4.0.3
SSH Tectia Client=4.3.4
SSH Tectia Server=5.1.3
SSH Tectia Server=5.3.4
SSH Tectia Server=5.3.5
SSH Tectia Client=5.0.0f
SSH Tectia Client=4.4.6
SSH Tectia Connector=4.2.0
SSH Tectia Connector=4.3.5
SSH Tectia Server=5.1.1
SSH Tectia Server=4.2.1
SSH Tectia Connector=5.0.1
SSH Tectia Server=4.2.0
SSH Tectia Server=4.0.7
SSH Tectia Connector=4.1.3
SSH Tectia Server=5.3.8
SSH Tectia Client=4.3.6
SSH Tectia Client=5.0.1f
SSH Tectia Client=4.4.1
SSH Tectia Client=5.0.2f
SSH Tectia Client=6.0.2
SSH Tectia Client=4.3.1j
SSH Tectia Server=5.4.0
SSH Tectia Server=5.5.1
SSH Tectia Server=6.0.0
SSH Tectia Connector=5.1.0
SSH Tectia Server=5.0.2
SSH Tectia Connector=5.3.1
SSH Tectia Client=6.0.4
SSH Tectia Server=5.3.2
SSH Tectia Server=4.4.7
SSH Tectia Connectsecure=6.0.4
SSH Tectia Client=5.3.2
SSH Tectia Client=4.3.1
SSH Tectia Server=5.2.2
SSH Tectia Server=4.3.0
SSH Tectia Server=4.4.0
SSH Tectia Server=6.0.4
SSH Tectia Client=5.2.1
SSH Tectia Connector=4.4.9
SSH Tectia Client=4.3.5
SSH Tectia Server=4.4.1
SSH Tectia Client=5.1.2
SSH Tectia Server=6.0.1
SSH Tectia Server=5.2.1
SSH Tectia Server=5.0.0
SSH Tectia Client=4.4.4
SSH Tectia Server=4.3.7
SSH Tectia Server=5.2.3
SSH Tectia Connector=5.1.2
SSH Tectia Server=4.4.4
SSH Tectia Server=4.0
SSH Tectia Connectsecure=6.0.2
SSH Tectia Connector=4.4.10
SSH Tectia Client=4.0.4
SSH Tectia Connector=5.3.0
SSH Tectia Connector=5.1.1
SSH Tectia Connector=5.0.3
SSH Tectia Client=4.4.11
SSH Tectia Connector=4.1.2
SSH Tectia Client=5.1.3
SSH Tectia Client=5.3.3
SSH Tectia Client=4.4
SSH Tectia Client=5.0.3
SSH Tectia Client=5.2.2
SSH Tectia Server=4.4.5
SSH Tectia Client=4.3.2j
SSH Tectia Server=4.3.6
SSH Tectia Client=4.3.8k
SSH Tectia Server=4.3.3
SSH Tectia Connector=4.0.7
SSH Tectia Client=5.3.5
SSH Tectia Client=4.3.2
SSH Tectia Connector=4.4.0
SSH Tectia Connector=5.3.2
SSH Tectia Client=5.3.8
SSH Tectia Connector=4.3.4
SSH Tectia Client=5.1.0
SSH Tectia Client=5.2.0
SSH Tectia Client=4.3.9k
SSH Tectia Server=4.3.2
SSH Tectia Server=4.0.4
OpenBSD OpenSSH=4.7p1
SSH Tectia Connector=5.3.3
SSH Tectia Client=4.4.7
SSH Tectia Server=5.4.1
SSH Tectia Connector=4.1.5
SSH Tectia Server=4.3.5
SSH Tectia Server=6.0.3
SSH Tectia Server=5.3.3
SSH Tectia Server=4.4.11
SSH Tectia Client=4.0.1
SSH Tectia Server=4.0.3
SSH Tectia Client=4.2.1
SSH Tectia Server=5.1.2
SSH Tectia Connector=4.4.4
SSH Tectia Client=4.2
SSH Tectia Connector=5.3.8
SSH Tectia Server=4.4.10
SSH Tectia Server=5.1.0
SSH Tectia Connector=5.3.7
SSH Tectia Client=5.0.0
SSH Tectia Connectsecure=6.0.0
SSH Tectia Connector=4.4.7
SSH Tectia Connector=4.4.6
SSH Tectia Client=4.4.2
SSH Tectia Connectsecure=6.0.3
SSH Tectia Client=4.4.10
SSH Tectia Connector=5.0.2
SSH Tectia Server=5.0.1
SSH Tectia Client=4.3.3
SSH Tectia Server=4.1.2
SSH Tectia Client=5.3.7
SSH Tectia Server=6.0.0
SSH Tectia Server=5.3.0
SSH Tectia Server=4.1.3
SSH Tectia Server=5.2.2
SSH Tectia Client=6.0.3
SSH Tectia Client=4.4.8
SSH Tectia Connectsecure=6.0.1
SSH Tectia Server=5.3.6
SSH Tectia Client=4.4.3
SSH Tectia Connector=5.0.0
SSH Tectia Client=4.3
SSH Tectia Server=4.2.2
SSH Tectia Server=5.2.0
SSH Tectia Connector=5.1.3
SSH Tectia Server=5.1.1
SSH Tectia Server=4.3.4
SSH Tectia Server=4.4.8
SSH Tectia Server=4.3.1
SSH Tectia Server=4.0.5
SSH Tectia Server=5.3.7
SSH Tectia Client=6.0.1
SSH Tectia Server=5.5.0
SSH Tectia Connector=5.2.2
SSH Tectia Client=6.0.0
SSH Tectia Client=4.3.7
SSH Tectia Client=4.4.9
SSH Tectia Server=4.4.9
SSH Tectia Server=5.2.4
SSH Tectia Server=6.0.4
SSH Tectia Client=4.0
SSH Tectia Client=5.2.4
SSH Tectia Client=5.1.1
SSH Tectia Client=5.3.1
SSH Tectia Server=4.4.2
SSH Tectia Client=5.0.1
SSH Tectia Client=5.3.0
SSH Tectia Server=6.0.1
SSH Tectia Server=5.4.2
SSH Tectia Server=4.1.5
SSH Tectia Server=6.0.2
SSH Tectia Client=4.0.5
SSH Tectia Server=5.3.1
SSH Tectia Client=5.3.6
SSH Tectia Server=4.4

Event History

Nov 19, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2008-5161?

CVE-2008-5161 is categorized as a high severity vulnerability affecting SSH Tectia Client and Server due to improper error handling.

2

How do I fix CVE-2008-5161?

To fix CVE-2008-5161, update your SSH Tectia Client and Server to the latest version available from SSH Communications Security.

3

What products are affected by CVE-2008-5161?

CVE-2008-5161 affects various versions of SSH Tectia Client, Server, and Connector, specifically versions from 4.0 through 6.0.4.

4

Can CVE-2008-5161 lead to unauthorized access?

Yes, CVE-2008-5161 can potentially allow unauthorized access due to the error handling flaw in the SSH protocol.

5

Is there a workaround for CVE-2008-5161 if I can't update immediately?

While the best option is to update, users should limit exposure by restricting access to vulnerable versions and monitoring for suspicious activity.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203
CVE-2008-5161 - Infoleak - SecAlerts